Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/q0cFTviq_Fpbk90lUMkjVL_7qew.roa
File: q0cFTviq_Fpbk90lUMkjVL_7qew.roa (raw, json)
Hash identifier: 56t4XzHWQVbymOrueejimj0Yf4qv5t5s7ZhGfJBf08I=
Subject key identifier: AB:47:05:4E:F8:AA:FC:5A:5B:93:DD:25:50:C9:23:54:BF:FB:A9:EC
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 2C57
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q0cFTviq_Fpbk90lUMkjVL_7qew.roa
Signing time: Wed 24 May 2023 03:54:10 +0000
ROA not before: Wed 24 May 2023 03:54:10 +0000
ROA not after: Sat 17 Feb 2024 02:46:59 +0000
asID: 24426
IP address blocks: 43.239.32.0/20 maxlen: 20
103.35.32.0/20 maxlen: 20
110.44.144.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11351 (0x2c57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 24 03:54:10 2023 GMT
Not After : Feb 17 02:46:59 2024 GMT
Subject: CN=AB47054EF8AAFC5A5B93DD2550C92354BFFBA9EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:06:7c:fe:da:1f:56:ef:13:f4:e6:58:46:
25:d0:3f:b3:a8:1a:f9:ff:9c:d5:1b:c8:31:cd:fa:
1f:20:95:87:22:3e:62:a1:53:b7:3d:04:1c:25:9c:
34:23:82:d1:34:da:24:fa:52:d7:97:b3:57:c0:8c:
df:e4:80:a3:da:a1:3e:33:83:fe:f9:da:63:83:de:
41:58:57:89:a1:bd:25:c1:60:3c:c9:1c:38:59:ae:
00:72:63:a5:97:ac:b7:04:5a:57:02:a2:2f:32:0d:
32:ef:d3:1e:42:54:e1:4a:a4:33:ed:60:d4:d0:d4:
0b:f7:ad:76:7e:f1:c1:a9:42:56:c0:f4:52:85:22:
4e:92:72:f0:29:54:19:34:7e:81:87:62:62:aa:d9:
bd:c3:2a:1f:e1:f5:c3:cd:a7:d1:d5:dd:6f:e6:56:
e8:1d:9b:39:12:b5:0b:21:97:05:66:ff:4c:40:67:
83:0a:d4:d7:de:ad:36:59:8d:02:29:97:ee:df:07:
05:2e:e1:b0:15:59:4c:a1:02:de:e9:22:16:a4:f8:
79:bf:ec:58:b1:1a:db:a2:96:5d:87:71:e2:c4:38:
b4:01:3c:aa:d0:53:51:d7:5b:37:df:92:d7:c9:e0:
45:21:96:57:88:fb:48:87:3b:dc:05:83:0a:02:03:
62:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:05:4E:F8:AA:FC:5A:5B:93:DD:25:50:C9:23:54:BF:FB:A9:EC
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/q0cFTviq_Fpbk90lUMkjVL_7qew.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.32.0/20
103.35.32.0/20
110.44.144.0/20
Signature Algorithm: sha256WithRSAEncryption
60:aa:6d:ab:c1:32:59:6c:5a:ff:1c:05:c7:76:fa:77:3e:f3:
6e:05:53:65:56:1f:f8:cf:3b:ac:1b:78:5c:bf:77:22:b7:04:
d6:d6:29:16:c4:8d:d3:d8:12:14:dd:c0:e5:1e:8d:e8:3e:4b:
d2:45:7c:b4:65:41:a2:cc:d7:40:f2:4b:c6:2e:2a:90:33:6d:
20:9e:bb:84:91:35:87:18:ca:74:db:38:b9:48:33:5d:02:35:
ad:37:45:7c:32:f5:41:b5:07:4c:04:6f:c1:3a:e5:38:76:01:
f3:67:40:48:6f:93:14:0b:08:0d:4f:e2:88:2e:5c:fd:f8:5b:
f4:dc:8b:d0:cf:44:a6:df:e0:65:fd:d9:98:ec:69:58:21:f8:
aa:12:94:1d:7e:c7:06:fd:02:16:7b:e1:6b:f7:2c:76:67:18:
8b:c6:50:16:55:0a:69:cd:43:c9:07:ff:aa:fe:64:ae:76:4e:
8d:06:7c:d7:06:cb:3f:8d:cc:45:8f:d5:96:91:1a:a5:bf:78:
09:f9:99:71:25:e9:dc:87:05:be:17:e7:56:7a:c4:a0:dd:89:
d0:ca:11:ad:42:60:47:0e:18:a1:89:1d:e1:d7:0d:e6:a6:e8:
a6:ce:63:41:7d:f8:c3:68:80:de:2a:b5:c4:cc:e9:00:13:6e:
8c:fb:e9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:12 2024 by rpki-client on console-ams.rpki-client.org